# Privacy Policy

> Plain-English policy for opti-portal.tech. Last updated 2026-08-07 —
> added the two access-request forms, which went live the day after
> the contact form turned this from a placeholder into a policy.

## Who we are

opti-portal.tech is run by Opti-Gen Core Systems Ltd, 66 Paul Street,
London EC2A 4NA, United Kingdom. For anything in this policy:
jamesb@opti-portal.tech.

## What we collect — and it is genuinely only this

The public hub has no accounts, no registration, no analytics, no
tracking cookies, and no advertising. The **only** personal data this
site collects is what you type into its three forms:

- **Get in Touch form** — your name and email address, your company
  name (only if you choose to add it), the request type you pick and
  your message. Sending it requires ticking a consent box; nothing is
  collected without it.
- **Client sign-in panel** — the email address you enter. It is
  checked against our private client list; a match is emailed its
  portal link, a mismatch gets an honest error and **no email is sent
  to anyone**.
- **Repo access request** — your name, email address, and reason.
  It becomes an email to us for manual review, plus an
  acknowledgement to you.

Browsing the site collects nothing at all.

## Why, and on what basis

We use what you send solely to review your request and reply to you —
that's it. The lawful basis is your consent (the box you tick) and our
legitimate interest in answering people who write to us. We don't use
it for marketing, we don't build profiles, and we never sell or share
it beyond the processors below.

## Who processes it (the honest chain)

Your submission travels: **this site → our own self-hosted n8n
automation server (on our VPS) → Resend → our inbox**, plus an
acknowledgement email back to the address you gave. The parties
involved:

- **n8n (self-hosted)** — runs on our own server; your data is
  processed on our infrastructure, not a third-party automation cloud.
- **Resend** (resend.com) — our email delivery processor. Configured
  in the EU region (eu-west-1) with open- and click-tracking
  **disabled**. Resend processes your name, email, and message solely
  to deliver the two emails.
- **Hostinger** — hosts our mailbox, where your message finally lands
  as ordinary email.

## How long we keep it

Your message lives in our mailbox as ordinary correspondence — kept as
long as the conversation is useful, deleted when it isn't, and deleted
immediately on request (see below).

## Your rights

Under UK and EU GDPR you can ask to access, correct, export, or erase
what we hold about you, or object to its processing. Email
jamesb@opti-portal.tech — or use the form's "Data deletion request"
type — and it will be handled without quibbling. Details on the
Information Rights and Retention & Deletion pages.

## Changes

When this policy changes, the date at the top changes with it. It will
never quietly grow an analytics section.